CVE-2015-2156

Published: Oct 18, 2017Modified: May 13, 2026

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Netty before 3.9.8.Final, 3.10.x before 3.10.3.Final, 4.0.x before 4.0.28.Final, and 4.1.x before 4.1.0.Beta5 and Play Framework 2.x before 2.3.9 might allow remote attackers to bypass the httpOnly flag on cookies and obtain sensitive information by leveraging improper validation of cookie name and value characters.

Affected (110)

Products: Netty: Netty · Lightbend: Play Framework · Playframework: Play Framework

1 product

1 product

1 product

Configuration A

36 vulnerable

Vulnerable Software	Affected Versions
Netty Netty	Up to 3.9.7
Netty Netty	Version 3.10.0
Netty Netty	Version 3.10.1
Netty Netty	Version 3.10.2
Netty Netty	Version 4.0.0
Netty Netty	Version 4.0.10
Netty Netty	Version 4.0.11
Netty Netty	Version 4.0.12
Netty Netty	Version 4.0.13
Netty Netty	Version 4.0.14
Netty Netty	Version 4.0.15
Netty Netty	Version 4.0.16
Netty Netty	Version 4.0.17
Netty Netty	Version 4.0.18
Netty Netty	Version 4.0.19
Netty Netty	Version 4.0.1
Netty Netty	Version 4.0.20
Netty Netty	Version 4.0.21
Netty Netty	Version 4.0.22
Netty Netty	Version 4.0.23
Netty Netty	Version 4.0.24
Netty Netty	Version 4.0.25
Netty Netty	Version 4.0.26
Netty Netty	Version 4.0.27
Netty Netty	Version 4.0.2
Netty Netty	Version 4.0.3
Netty Netty	Version 4.0.4
Netty Netty	Version 4.0.5
Netty Netty	Version 4.0.6
Netty Netty	Version 4.0.7
Netty Netty	Version 4.0.8
Netty Netty	Version 4.0.9
Netty Netty	Version 4.1.0 beta1
Netty Netty	Version 4.1.0 beta2
Netty Netty	Version 4.1.0 beta3
Netty Netty	Version 4.1.0 beta4

Configuration B

74 vulnerable

Vulnerable Software	Affected Versions
Lightbend Play Framework	Version 2.0.2
Lightbend Play Framework	Version 2.0.2 rc1
Lightbend Play Framework	Version 2.0.2 rc2
Lightbend Play Framework	Version 2.0.3
Lightbend Play Framework	Version 2.0.3 rc1
Lightbend Play Framework	Version 2.0.3 rc2
Lightbend Play Framework	Version 2.0.4
Lightbend Play Framework	Version 2.0.4 rc1
Lightbend Play Framework	Version 2.0.4 rc2
Lightbend Play Framework	Version 2.0.5
Lightbend Play Framework	Version 2.0.5 rc1
Lightbend Play Framework	Version 2.0.5 rc2
Lightbend Play Framework	Version 2.0.6
Lightbend Play Framework	Version 2.0.7
Lightbend Play Framework	Version 2.0.8
Lightbend Play Framework	Version 2.0 rc3
Lightbend Play Framework	Version 2.0 rc4
Lightbend Play Framework	Version 2.0 rc5
Lightbend Play Framework	Version 2.1.0
Lightbend Play Framework	Version 2.1.1
Lightbend Play Framework	Version 2.1.1 rc1
Lightbend Play Framework	Version 2.2.0
Lightbend Play Framework	Version 2.2.1
Lightbend Play Framework	Version 2.2.2
Lightbend Play Framework	Version 2.2.6
Lightbend Play Framework	Version 2.3.0
Lightbend Play Framework	Version 2.3.0 rc1
Lightbend Play Framework	Version 2.3.0 rc2
Lightbend Play Framework	Version 2.3.1
Lightbend Play Framework	Version 2.3.2
Lightbend Play Framework	Version 2.3.2 rc1
Lightbend Play Framework	Version 2.3.2 rc2
Lightbend Play Framework	Version 2.3.3
Lightbend Play Framework	Version 2.3.4
Lightbend Play Framework	Version 2.3.5
Lightbend Play Framework	Version 2.3.6
Lightbend Play Framework	Version 2.3.7
Lightbend Play Framework	Version 2.3.8
Playframework Play Framework	Version 2.0.1
Playframework Play Framework	Version 2.0
Playframework Play Framework	Version 2.0 beta
Playframework Play Framework	Version 2.0 rc1
Playframework Play Framework	Version 2.0 rc2
Playframework Play Framework	Version 2.1.1 2.9.x-backport
Playframework Play Framework	Version 2.1.1 rc1-2.9.x-backport
Playframework Play Framework	Version 2.1.1 rc2
Playframework Play Framework	Version 2.1.2
Playframework Play Framework	Version 2.1.2 rc1
Playframework Play Framework	Version 2.1.2 rc2
Playframework Play Framework	Version 2.1.3
Playframework Play Framework	Version 2.1.3 rc1
Playframework Play Framework	Version 2.1.3 rc2
Playframework Play Framework	Version 2.1.4
Playframework Play Framework	Version 2.1.4 rc1
Playframework Play Framework	Version 2.1.4 rc2
Playframework Play Framework	Version 2.1.5
Playframework Play Framework	Version 2.1.6
Playframework Play Framework	Version 2.1.6 rc1
Playframework Play Framework	Version 2.2.0 m1
Playframework Play Framework	Version 2.2.0 m2
Playframework Play Framework	Version 2.2.0 m3
Playframework Play Framework	Version 2.2.0 rc1
Playframework Play Framework	Version 2.2.0 rc2
Playframework Play Framework	Version 2.2.1 rc1
Playframework Play Framework	Version 2.2.2 rc1
Playframework Play Framework	Version 2.2.2 rc2
Playframework Play Framework	Version 2.2.2 rc3
Playframework Play Framework	Version 2.2.2 rc4
Playframework Play Framework	Version 2.2.3
Playframework Play Framework	Version 2.2.3 rc1
Playframework Play Framework	Version 2.2.3 rc2
Playframework Play Framework	Version 2.2.4
Playframework Play Framework	Version 2.2.5
Playframework Play Framework	Version 2.3 m1